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Abstract. 

We investigate probabilistic transformations of quantum states from a 'source' set 
to a 'target' set of states. Such transforms have many applications. They can be used 
for tasks which include state-dependent cloning or quantum state discrimination, and 
as interfaces between systems whose information encodings are not related by a unitary 
transform, such as continuous-variable systems and finite-dimensional systems. In a 
probabilistic transform, information may be lost or leaked, and we explain the concepts 
of leak and redundancy. Following this, we show how the analysis of probabilistic 
transforms significantly simplifies for symmetric source and target sets of states. In 
particular, we give a simple linear program which solves the task of finding optimal 
transforms, and a method of characterizing the introduced leak and redundancy in 
information-theoretic terms. Using the developed techniques, we analyse a class of 
transforms which convert coherent states with information encoded in their relative 
phase to symmetric qubit states. Each of these sets of states on their own appears in 
many well studied quantum information protocols. Finally, we suggest an asymptotic 
realization based on quantum scissors. 



Transformations between symmetric sets of quantum states 



2 



1. Introduction 

Quantum information theory promises new and exciting ways to process information. 
Often the advantage a quantum protocol gives over a classical procedure lies in the fact 
that quantum states may be non-orthogonal. Classical information may be encoded in 
non-orthogonal quantum states, as is the case for example in quantum key distribution. 
The classical information then cannot be fully extracted from the quantum state alone. 
Many physical systems are candidates for the realization of quantum processing, and 
often they perform well at distinct tasks. Therefore, future quantum devices may 
well be hybrid systems with interfaces linking the different parts, just as our classical 
information processing devices are today. When classical information is encoded in a set 
of quantum states, the information encodings of one system may be incompatible with 
the encodings of another in a sense which has no classical analogue: the 'source' states 
may not be related to the corresponding 'target' states by a fixed unitary transformation. 
This occurs, for instance, when we consider transforms between states of systems of 
distinct dimensionalities such as typical qubit states and coherent or sqeezed states of 
continuous- variable systems. When transferring information from one system to another 
where the encodings are incompatible in this sense, we must then either accept errors 
or resort to probabilistic scenarios where information may be lost, or leaked. This is 
important from an information-theoretic and cryptographic perspective. Information is 
no longer perfectly controlled by the emitting party. 

Transformations that take a 'source' set of quantum states to a 'target' set of 
quantum states, where the states in the two sets are not pairwise related by a single 
unitary transform, also have other applications. State-dependent quantum cloning is 
one example pQ. Another related and well-studied family of such transforms solve 
the problem of amplifying coherent light, while keeping the coherent phase unaltered 
[21 El IU El [6] . This problem is very important in classical and quantum communication 
tasks over larger distances, and is usually resolved by generating approximations of 
amplified coherent states. Optimal measurements for distinguishing between quantum 
states can also be seen as transforms taking some set of quantum states to mutually 
orthogonal states, followed by a measurement to distinguish the latter from each other. 
For so-called minimum-error measurements, pioneered by Holevo and Helstrom, the 
transforms are allowed to err, i.e. the declared output need not always be correct. 
Another tradition requires correctness but allows for result which declares that the 
transform (measurement) has failed, following the works of Ivanovic, Dieks and Peres 
[3 [HI |9]. Such measurements are then called unambiguous jTQl ITT] . 

Here we focus on unambiguous transforms taking pure states to pure states. For 
this setting there exists a convenient framework based on the structures of the Gram 
matrices of 'source' and 'target' states, developed by Chefles, Jozsa and Winter [T2| [T3]. 
which we will briefly present. In these works, the sets of source and targets states are 
general, and finding transforms for given sets of source and target states is complicated. 
However, it is known that for the problem of distinguishing quantum states which 
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comprise a symmetric set, a simpler treatment is possible (TUJ [HJ US]- As we will 
show, this restriction simplifies the theory for general probabilistic transforms as well. 
As an application of the theory we develop, we study the properties of converting a set 
of coherent states to qubit states. This is an important example of an 'interspecies' 
transform, as these two types of encodings frequently appear in quantum information 
processing tasks. 



2. Preliminaries 



Our problem of interest is stated as follows: given two sets of pure states A and B 
(called 'source' and 'target' sets, respectively) of finite size N, 



A = {k)}f =1 ; B = {\h)} 



N 



= 1- 



what are the properties of a transform T, allowed by quantum mechanics, which 
performs 7~(|aj)) = \bi) for all i perfectly with a certain probability? The transform can 
fail to produce the desired output state, or succeed, and these two possible outcomes 
are reported, i.e. the transform is heralded. 

In the most general case, the success probabilities may depend on which source 
state we start from. We then have the following statement: 

Lemma 1 There exists a probabilistic transform taking each state \aj) in A to the state 



\bj) in B, succeeding with the probabilities Pi, for i 
matrices of kets IP and IT/ such that the equality 

P f o Il f 



G A = P s o IT o G 



B 



N , iff there exist Gram 



holds, where 



and 



i.j 



(2) 



and Ga and Gb are the Gram matrices of sets A and B. 

This is a special case of the Theorem 3 in [12]. In the Lemma above, o denotes the 
Hadamard (Shur, point-wise) matrix product, and the Gram matrix of the set of kets 
(or more generally vectors) A 



{Wi}}?^ 1 is given by 



G A = [{a p | a q )} M , p, q = 0, . . . , N - 1. 



The necessary and sufficient conditions for a matrix M to be a Gram matrix of 
normalized kets (states) are that i) M is a positive-semidefinite matrix, and ii) M 
has unity across the main diagonal. 

Such a quantum transform can be equivalently viewed, in the spirit of the 
Stinespring dilation, as a unitary transform acting on an augmented Hilbert space, 

^ki)|0)|0) = v ^l^)l^)|0) + v / l^l^OI^)|l)for all i, (3) 

where we learn whether the transform has succeeded or failed by measuring the third 
'indicator' register on the right-hand side of the expression. One may show that the 
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matrices II s and n/ in expression are the Gram matrices of the sets of kets {|^>i)}j an d 
{\4>i)}i, respectively. If the transform in equation ([3]) succeeds, then the output registers 
contain the target state \bi) but also a residual state which may be correlated with 
the input state. From an information-theoretic perspective, this residual state may be 
seen as a leak of information, hence we call the set of states the leak. If the states 

\tpi) are not correlated with the input state, which happens if and only if \ipi) = for 
all i and j, then the transform is called leakless. Analogously, in case the transform fails, 
a fixed fail state is produced along with a residual state is produced. The residual 
state may be correlated with the input state, and may be used to subsequently attempt 
to reconstruct the desired outcome. For this reason we call the set of states {|<^i)}i the 
the redundancy. If all the states in the redundancy are identical, only then is the residual 
state uncorrelated to the input state, and the transform is called redundancy-free. 

If the success probabilities above do not depend on the source state (pi = pj for all 
i, j), we call the transform uniform. For this case the notion of the optimal transform can 
be naturally defined: a uniform probabilistic transform is optimal, if no other transform 
succeeds with a strictly grater probability. 

Deterministic and unitary transforms are easily seen to be special cases of 
probabilistic transforms. For a deterministic transform, it holds that Pi = 1, in which 
case the criterion reads Ga = II s o Gb (for some Gram matrix of states II s ). For a 
unitary transform the complex matrix II s is an outer product of a vector, containing 
roots of unity, with itself (c.f. [12]) Q. Throughout his paper, with G$ we will denote the 
Gram matrix of the set of states S, and with Xg s a vector comprising the eigenvalues of 
the matrix G$- With I we denote the identity matrix, and with 1 we denote the matrix 
with unity at each entry. 



2.1. Example: uniform unambiguous discrimination of pure states 

Unambiguous discrimination of states (UDS) identifies the input state from a pre- 
defined set of states, error free, but allows a 'failure' option. It is equivalent to a 
probabilistic transform for which the states \bi) are mutually orthogonal. The criterion 
for the existence of such a transform is given by Lemma [U Since the Gram matrix of 
orthogonal states is the identity, and the Hadamard product of the identity and Gram 
matrix of states is the identity again, for the special case where the success probability 
p is independent of the source state (uniform UDS), the existence condition simplifies 
to the inequality 

G A -pI>0, (4) 

meaning that the matrix Ga — pi is positive-semidefinite. Since unitary basis change 
preserves operator positivity, and G A is positive-semidefinite, hence diagonalizable in 

| This freedom in the complex phases reflects the fact that kets in general contain information about 
the physically irrelevant complex phase. 
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an orthonormal basis, this implies and is implied by 

p < min X Ga , 

where minAc A denotes the smallest eigenvalue of the matrix Ga- From this condition 
we easily capture a known result: the optimal success probability of UDS is equal to the 
smallest eigenvalue of the Gram matrix Ga @- A consequence of this is another famous 
result: a set of states may be unambiguously discriminated if and only if that set of 
states is linearly independent. The latter is clear as the spectrum of Ga contains a zero 
element if and only if the set A is linearly dependent. 

From the fact that unambiguous state discrimination is possible iff a set of states 
if linearly independent, it is easy to see that if a uniform probabilistic transform T is 
optimal, then the redundancy is a linearly dependent set of states. To prove this, assume 
that a uniform probabilistic transform T succeeds with probability p, and that the 
redundancy is linearly independent. Then, in the case of failure, one can run UDS on the 
redundancy, and if this succeeds (with probability p' > 0, due to linear independence), 
the target state can still be generated from the outcome. This overall procedure (T 
followed by UDS in case of failure) comprises a uniform probabilistic transform T' 
which performs the same task as T but succeeds with probability p' + p > p. Hence T 
could not have been optimal. 

3. Transformations between symmetric sets of pure states 

As noted, the case when the sets of states in focus is symmetric is of interest since many 
quantum protocols [161 El UHl EUJ HE]) work with symmetric quantum states. 

A set of (pure) states A = {Ictj)}^ 1 is symmetric if there exists a fixed unitary U 
with the property 

U\<h) = l« (i+ i)mod n) for a11 % - 
The assumption that source and target states are symmetric allows us to link 
probabilistic and uniform probabilistic transforms. In this case, any probabilistic 
transform can be 'uniformized', as shown by the following lemma: 

Lemma 2 (Uniformization) If there exists a probabilistic transformation taking the 
states in A to states in B, which succeeds with the probabilities {pi]f =l , where A and B 
are symmetric sets of states, then there exists a uniform probabilistic transform taking 
the states in A to states in B which succeeds with probability 




The proof of this lemma is given in the Appendix. 

Additional properties of uniform transforms with symmetric source and target 
states are rooted in the structural properties of Gram matrices of sets of symmetric 
states: 

§ This result was proven using different techniques and stated in a different formalism in [10] . 
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Lemma 3 A Gram matrix of kets is a circulant matrix if and only if the corresponding 
set of kets is symmetric. 

Proof of this lemma is given in the Appendix. 

A circulant matrix is a square matrix, defined by its first row, for which the i th row 
is the right-circular shift of the first row by i — 1 positions. Circulant matrices frequently 
appear in signal processing, and have two convenient properties: i) circulant matrices 
diagonalize when conjugated by the unitary discrete Fourier transform (DFT) matrix, 
and it) the discrete Fourier transform of the first row of the circulant matrix is a vector 
containing the eigenvalues of the circulant matrix [21]. The discrete Fourier transform 
matrix of size N is the Vandermonde matrix of the N th primitive roots of unity, given 
with 

-2(p-l)(g-l)i7r" 



DFT 



cxp 



N 



p=l,...N,q — l,...N 



which, when scaled by the pre-factor 1 / becomes unitary, and which we then denote 
uDFT. 

The criterion for the existence of a uniform probabilistic transform taking states 
from A to B, succeeding with probability p, is the existence of Gram matrices of states 
IT and n/ such that the equation 

G A = pU s oG B + (l-p)U f (5) 

holds. This is a slight simplification of the more general condition in Lemma [TJ 

In general, probabilistic uniform transforms with symmetric source and target sets 
may have leak and redundancy which are not symmetric. Nonetheless, the following 
lemma shows that such a transform has a variant with the same success probability 
where the leak and redundancy are symmetric: 

Lemma 4 (Symmetrization) If there exists a uniform probabilistic transform taking 
states from a symmetric set A to a set of symmetric states B, succeeding with some 
probability p, then there exists a uniform probabilistic transform taking the states from 
A to B, succeeding with probability p, where the leak and redundancy are symmetric. 

Proof of this lemma is given in the Appendix. 



3.1. Finding optimal uniform transforms 

Both from a practical and theoretical point of view, when considering transforms from a 
source to a target set one is often most interested in the optimal transforms. Optimality 
is naturally defined only in the case of uniform transforms. However, by virtue of Lemma 
121 when transforms with symmetric source and target sets are concerned, if any kind of 
transform linking the source and target states exists, then so does a uniform transform. 
In this sense, for transforms between symmetric sets, optimality can in principle always 
be defined as the optimality of the uniform transform [jjj. 

|| One may be tempted to do the same for non-symmetric transforms. However there exist non- uniform 
transforms which have non-symmetric source and/or target sets which succeed with non-zero probability 
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In general, given two sets of states A and £>, the quest for the optimal uniform 
transform taking the states in A to states in B reduces to the maximization of the success 
probability p over the space of all positive-semidefinite matrices (of the appropriate size) 
IP and 11^ with unit diagonal, subject to the constraint given in expression (JSJ). The 
dimensionality of the search space is then quadratic in the number of states. However, 
if source and target states are symmetric, as a consequence of Lemma HI we may assume 
that IF and W are circulant as well. Then all the matrices appearing in expression (JSJ) 
are circulant, as the Hadamard product of circulant matrices is also circulant. Hence, 
they all diagonalize in the same basis, and the dimensionality of the search space reduces 
quadratically from 0(N 2 ) to O(N), where N is the number of states. 

The problem of finding optimal uniform transforms which have symmetric source 
an target sets is resolved by the following canonical linear program: 



maximize 



~& T . it 



subject to M. it < b 
and x > 0, 

where ~& T = [1, . . . , 1], b = Xc A , and M = DCM\ G , which is a circulant matrix, where 
the i th column is the vector Xg b 'downward' shifted by % — 1 positions (the discrete 
convolution matrix DCM\ Gb of the vector Xq b )- The optimal success probability is 
given by 

-f T it 

where the dot '.' (e.g. lt T .if or M.lt) denotes the standard matrix product. The 
vector of eigenvalues of the Gram matrix of the leak of the optimal transform is given 
by Arp = -it. As both Ga and Gb are circulant matrices, the vectors of eigenvalues 
Xg a and Xg b are computed by taking the discrete Fourier transform of the first row of 
Ga and Gb, respectively. 

In the remainder of this section we show that the linear program above solves 
the problem of finding optimal uniform transforms. The constraint (JHJ) where all the 
matrices are circulant can be written in terms of the vectors of eigenvalues of the matrices 
appearing, as they all diagonalize in the same basis: 

X Ga = pXn*oG B + (1 - p)X U f- (7) 

Note that for the vector A n / to be a vector of eigenvalues of a circulant Gram matrix 
of states, it is sufficient and necessary that all its entries are non-negative and sum up 
to N. Using the circular convolution Theorem it can be shown that 

Xn s oG B = ^n s * ^G s) (8) 

where * represents the (normalized) discrete convolution (or discrete cross-correlation) 
of vectors defined al follows. If it and ~$ are two vectors of size N, with corresponding 

for some states at least, for which no uniform transform exists (all uniform transforms fail with unit 
probability) . 
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entries Xi and yi for i = 0, . . . , N — 1, then it = it * ~$ is a length iV (with components 
denoted z,), defined component- wise by 

1 

Zi = 5-/ ^'^[(iv-i+i) mod iv]- (^) 
i=o 

The discrete convolution of two vectors can also be represented in terms of a matrix- 
vector product by using the discrete convolution matrix DCM^ of the vector x defined 
via its transpose: the transpose matrix DCM^. is a circulant matrix whose first row is 
the vector it. It holds that it *lf = DCM-^.l? = DCM^.lt — it * if. Hence, the 
constraint (J7J) is equivalent to 

X Ga =pDCM XGB \ U s + (1 -p) A n /, (10) 

which can be shown to be equivalent to the inequality 

X Ga -pDCM Xgb X U s>0, (11) 

where Xn° is a non-negative real vector, whose entries sum up to N. The inequality above 
is interpreted component-wise 0. To obtain the linear program stated at the beginning 
of this section, we note that if a vector it is a vector of length N with non-negative 
entries {x^}, which maximizes s = YliLi x i subject to the constraint 

DCM XGB lt <X Ga , (12) 

then An" = ^jlt allows for the maximal p subject to constraint (TTTT) . and the maximum 
is reached at p — 4?. 

3.2. The geometric interpretation of the optimization procedure 

As we have shown, the search for the optimal probability of success p op t of a uniform 
transform which takes N input states to N output states, where both sets of states are 
symmetric, reduces to the following optimization problem: 
p pt is the maximal p subject to constraint 

X Ga = p DCM Xgb Xw + {l-p) A n /. (13) 

where An= and A n / are some non- negative real vectors, whose entries sum up to N. 
We have also shown that the constraint above is equivalent to the inequality 

X Ga - P DCM Xgb X U s >0, (14) 

where An= is a non-negative real vectors, whose entries sum up to N. 

To prove this equivalence, note that (fit))) implies the constraint (TlTj) as the eigenvalues of have 
to be non-negative. To see that the inverse holds as well, it suffices to show that if Arp is a vector of 
positive components which sum up to N, then the entries of the vector Xq a ~ P DCM\ Gb Arp sum up 
to (1 — p)N. By construction, the entries of Xg a sum up to N. Recall that DCM XGg An= is also a 
vector of eigenvalues of a Gram matrix of a symmetric set of kets. Hence its components also sum up 
to N. Hence, the components of \g a — P DCM XGg An» sum up to N — pN = (1 — p)N, and we have 
shown the equivalence of constraints (J7J, (fTTj|) and (TTTj) . 
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The search space defined by the constraint fill I) is the space of all points embedded in 
an N dimensional space whose coordinates sum up to N. This is a convex set, defined by 
the extreme points {e^}^, where is a vector with the number N as the i th component, 
and zeroes elsewhere. But then, by the linearity of matrix-vector multiplication, the set 

S = [DCM XGB X U3 \X m > 0, HAxfIIi = iv} 

is a convex set as well. The norm || ■ ||i is defined as the sum of the absolute values 
of the entries of the vector in the argument. It is easy to see that S is the convex 
hull of the columns of the matrix N x DCM\„ . First, let us assume DCM\ n is 
non-singular, which is equivalent to saying that the set of target kets does not contain 
mutually orthogonal kets. Then it holds that the columns of the matrix iV x DCM\ Gg 
are also the extreme points of the set S. The constraint (lllj) can then be written as 

X Ga - P X>0 (15) 

where X G S. 

Let T be the set defined as follows: 

T = conv{{ei}f =l ), 

where conv(A) denotes the convex hull of the set of points A. T is the convex set of all 
points which correspond to a symmetric set of N states. This is a regular (N— l)-simplex 
which we can embed in the vector space R N . Clearly, the point X Ga is an element of T, 
and S is also a regular iV — 1-simplex, contained in T. Simplices T and S share their 
center at coordinates (1, . . . , 1), and S is in a scaled down, rotated copy of T. From this 
it can be shown that the rows of the matrix DCM\ Gg are the extreme points of the 
set S even when the discrete convolution matrix is singular. The only exception is the 
degenerate case when all the entries of DCM\ Gg are equal, which corresponds to the 
case when the set of target states is an orthogonal basis. 

It is easy to see that, if Xq a lies in S, then the constraint ( ITT]) can be satisfied for 
p — 1, i.e. there exists a deterministic transform from the set of states A to the set of 
states B. If this is not the case then the geometric interpretation of the constraint is as 
follows: 

Lemma 5 For a < p < 1 there exists a solution X satisfying the constraint j[T5\) if 
the intersection between the simplex p x S = {p x e S}, embedded in R N , and 

the (N) orthotope (hyperrectangle or box) L defined by the opposite points (0, . . . , 0) and 
Xg a is not the origin point alone. 

The orthotope L can be defined as 

L = {it e R n \\ Ga -~&>0}, 

which makes the validity of the geometric interpretation above obvious. The geometric 
interpretation is illustrated in Figure [lj for the case N = 3. 
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Figure 1. Illustration of the geometric interpretation of the solution existence criterion 
given in expression (|15|) . for TV = 3. The the vector of eigenvalues of the Gram matrix 
of the source states is represented as a single point (blue in our illustration) which 
lies somewhere in the simplex dchned by the extremal points (0, 0, 1), (0, 1, 0), (1, 0, 0). 
This simplex is represented by the transparent triangle. The source states (represented 
by the blue point) uniquely define the orthotop L - a box, given in yellow. All points 
in the orthotope (and only those points) have the property that i) all their components 
are non-negative, and ii) any point in the orthotope when subtracted coordinate-wise 
from the blue point (defined by the source states) gives a point with non-negative 
components. The vector of eigenvalues of the Gram matrix of the target states defines 
the corresponding discrete convolution matrix, the columns of which are the extremal 
points of the search space S defined at the beginning of this section. The space S 
is, for N — 3, a regular 2-simplex (moreover, an equilateral triangle), embedded in 
a 3-dimensional space, and is represented with the red triangle which lies within the 
transparent triangle representing all possible vectors of eigenvalues of the Gram matrix 
of a size three symmetric set of states. Together with the origin, the extremal points 
of S define the 3-simplex p x S = {p x x\x E S} which is represented by the entire 
red tetrahedron in the illustration. Lemma [5] states that the necessary and sufficient 
criterion for the existence of a probabilistic transform taking the source to the target 
states is that the intersection between the red tetrahedron and the yellow box is not 
just the point of origin. The point of origin would correspond to a transform which 
succeeds with probability zero. Note also that clearly the intersection of the orthotope 
and the tetrahedron can be just the point of origin only if the orthotope has at least 
one dimension zero. This corresponds to the setting where source states are linearly 
dependent. 
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Let us now consider a few special cases, for illustration purposes. It is clear that if 
S = T then for any set of input states the transform can be done deterministically, as 
Xg a G T. However, if S = T, then DCM\ Gb has exactly one '1' in each row and each 
column, hence the vector of eigenvalues Xg b has one entry equal to N and the rest is 
zero. This corresponds to the setting where the target set of states comprises exactly 
one state, and the deterministic transformation preforming this is the contraction to 
that particular state. 

In the opposite scenario, S may consist of a single point - the point (1, . . . , 1). 
In this case DCM\ Gg is a matrix containing just unities, and the corresponding set of 
target states is then orthogonal. For there to exist a solution satisfying the constraint 
(fT5]) . by the geometric interpretation, the line {p(l, ■ ■ ■ , 1)|0 < p < 1} must intersect 
the orthotop L. This happens if and only if the extreme point Xg a which defines the 
orthotope has all components non-zero. This requirement implies that the input set of 
states is linearly independent. If we recall that a transformation with orthogonal target 
states is equivalent to unambiguous discrimination of input states, then we see we have 
recaptured a well-known result EJ a set of states can be unambiguously discriminated 
if and only if the set is linearly independent. 

Finally we can use the geometric interpretation to give a new result, which we 
haven't addressed thus far: If a uniform transformation with symmetric sets of input 
and output states is optimal, then the leak is linearly dependent. To show this we will 
adopt a dynamic picture as illustrated in Figure [2j Let X Ga ^ T. What we seek is 
the largest p such that the simplex p x S = {p x G S} and the orthotope L 

intersect. The simplex px S clearly lies in the simplex pxT = {pxlfr\!fr G T}, and the 
intersection will occur in this simplex. As we slowly decrease p the intersection between 
the simplex pxT and the orthotope L 'grows' while the simplex px S slowly reduces in 
size. At one point, for some p, the intersection of the simplex pxT and the orthotope L 
touches the simplex p x S, if there is a solution to the problem. Whenever this happens, 
the touching point is clearly on the face of the simplex p x S, and not an interior point. 

This means that the solution (the corresponding touching point in S) is a convex 
combination of at most N — 1 rows of DCM\ Gg , which in turn implies that Arp has 
a zero component. Since Arp is the vector of eigenvalues of the Gram matrix of the 
leak, this means the leak is linearly dependent. If we now join this with the fact that 
optimal transforms have a linearly dependant redundancy, shown in section 12.11 we get 
the following statement: 

Lemma 6 If a uniform transformation with symmetric sets of input and output states 
is optimal, then the leak and the redundancy are linearly dependent. 

The inverse however, does not hold. 

+ Restricted, however, to symmetric sets of input states. 
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Figure 2. Dynamic picture: The left-hand side illustration represents the setting 
where the optimal transform has been found. For a particular (maximal) p the 
simplex which is the intersection of the (red) tetrahedron and the simplex p x 
T = conv((0, 0,p), (0,p, 0), (p, 0, 0)) represented with the purple triangle touches the 
intersection of the yellow orthotope L and the same simplex p x T. The right-hand 
side image illustrates this event when the view is restricted only to the N — 1 = 2- 
dimcnsional unique hyperplanc H p containing the simplex p x T. The intersection 
of the hyperplane H p and the whole red tetrahedron makes up the red triangle, the 
purple triangle is the convex set p x T = conv((0,0,p), (0,p, 0), (p, 0, 0)) in the same 
hyperplane. The yellow triangle corresponds to the intersection of the hyperplane H p 
and the extended orthotope V where the edges of the original orthotope are allowed 
to extend to — oo each. This intersection is a regular 2-simplex again, with a fixed 
orientation with respect to the simplex p x T. In the dynamic picture, if we were to 
let p slowly decrease from unity, we would witness the yellow triangle emerge from 
a single point, and grow until it touches the red triangle. The centre of the yellow 
triangle would slowly move towards the closest extremal point of p x T due to the 
change of its position in the barycentric coordinate system of the simplex p x T which 
changes as a function of p. 



Geometric characterization of the leak and the redundancy 

As we have shown, a uniform transform from symmetric to symmetric states succeeding 
with the probability p can always be realized in such a way that the leak and the 
redundancy are symmetric sets of states (Lemma Hj). In this case, the leak and the 
redundancy can completely be characterized from the geometric picture. Recall that, if 
the transform exists for a fixed p, then the intersection between the simplex p x S and 
the orthotop L is non-empty and this intersection is contained in the simplex p x T. It 
is easy to see that the intersection pxF = LC\pxT is a, convex set, more precisely, a 
bounded convex polytope. 
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Let X be a solution, obeying the constraint (II 5p . The vector X completely 
characterizes the leak. Recall, the vector X is of the form DCM\ Gg Arp, where Arp 
is the vector of eigenvalues of the leak set. Thus, the vector X, viewed as a point in the 
simplex pxT embedded in the Euclidean space R , is a convex combination of the rows 
of the matrix DCM\ Gg . The weights of this convex combination are the components 
of An« • In other words, the representation of X in the barycentric coordinates given by 
the extreme points of p x S (these points are the rows of the (scaled) matrix DCM\ Gg ) 
gives exactly the vector of eigenvalues of the Gram matrix II s . A barycentric coordinate 
system is a coordinate system in which a point's position is specified as the center of 
mass, or barycenter, of masses placed at the vertices of a simplex, in our case the simplex 
p x S, which is the convex hull of the rows of the matrix p x DCM\ Gg . 

An analogous observation can be done for the redundancy - X represented in the 
barycentric coordinates of some of the the extreme points of L H p x T □ will give us the 
structure of the redundancy. While this relationship is more involved than in the case 
of the leak, and we leave it for further research, certain easy observations can be made 
for the optimal transform case. 

As we noted, if the transform is optimal, then the solution point X lies in the 
intersection of the faces of the polytope p x F = Lf]p x T and the simplex px S, i. e. it 
is not in the interior of either. If the dimensionality of the face which is involved in the 
contact of p x S is zero (a vertex) then every symmetrized optimal transform is always 
leakless. Similarly, if the dimensionality of the face which is involved in the contact of 
p x F is zero, then it is redundancy- free. 

If the contact involves faces of higher dimensionalities of p x F then essentially 
anything may happen, depending on the structure of the overlap. In the example given 
in the right-hand side illustration of Figure [21 the contact point for the simplex p x S 
(red) and the simplex p x V n H p (yellow) is a vertex of the simplex p x S, and thus 
this transform is leakless. However, the contact point is interior of a 1-dimensional face 
of the yellow simplex, indicating that the vector of eigenvalues of the redundancy has 
two non-zero entries. Thus, the redundancy comprises at least two non-equal vectors. 

Note that the structure of the overlap depends on the relative orientations and 
positions of the polytope p x F and the simplex p x S. As we noted, the simplex p x S 
is just a scaled down and rotated simplex p x T. The orientation of the polytope px F 
is in a sense fixed with respect to the orientation of p x T. To explain this, consider 
the simplex L' Hp x T' where V = YliLi (~ °°>^c?a]> ^g a being the i th component of 
the vector \q a and the product is the Cartesian product. We define pT 1 to be the 
hyperplane defined by the points {p x ei}f =x . The set V is just the extended orthotope 
L where the sides (1-faces) radiating from the point Xq a are allowed to stretch to — oo. 
Then LfHpxT 1 is the intersection of L' Hp x T' and the positive quadrant Yli=i [0> °°} • 
L' C\p x T' is then a regular iV-simplex, and if we translate it by moving the center to the 

* The number of the extreme point of this polytope may be larger than N + 1, but by Caratheodory's 
theorem, each point in this polytope can be represented as a convex combination of at most N + 1 
points. 
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point (p, . . . , p) we have a simplex which is a scaled, centrally mirrored copy of p x T. 
In this sense, the orientation of p x F (recall, p x F = (JJ n p x T') H I"I i=1 [0, oo)) is 
fixed, relative to the orientation of p x T. 

5.3. Quantifying the leak and the redundancy 

Transformations between different types of quantum states become unavoidable when 
heterogeneous encodings are used for different aspects of quantum information tasks. 
In particular, such transform may be part of a cryptographic protocol, in which case 
quantifying the leak and redundancy in information-theoretic terms becomes crucial. 
For instance, one can imagine a simple two-party scheme in which party A, traditionally 
called Alice, wishes to send to party B, called Bob, information encoded in quantum 
states comprising the set of target states B. However, Alice has at her disposal only 
quantum states from a set of quantum states A. So, Alice indeed does send her 
information encoded as states in A to Bob, who performs an optimal probabilistic 
transform in order to obtain the target state B. For example, an ideal protocol may 
call for single-qubit states, but Alice can only generate pure states which approximate 
qubit states. It is then important for Alice to know what additional information Bob 
can obtain when transforming source states to target states % As we have seen, such 
a transform is characterized by an expression of the form Ga = pIF o(? B + (l-p)n^ 
where the Gram matrices Ga and Gb fully characterize the source and target states (up 
to unitary equivalence), and II s and IF characterize the leak and the redundancy, that 
is, the residual states when the transform succeeds and when it fails, respectively. One 
way by which Alice may quantify the leak of information (embodied in the leak states) 
is by calculating the accessible information in this set of states. If {p;}^ 1 is a set of 
quantum states, then the accessible information I acc in this set of states is bounded 
above by the Holevo x quantity, I acc < x(pavg) = S(p A vc), where p A vc = l/NJ2iPi 
is the average state if each p, t appears equally likely as a message, S(-) denotes the Von 
Neumann entropyand the last equality holds if pi are pure. If A = (Ao, • • • , Aat_i) is the 
vector of the eigenvalues of Pavg, then the Von Neumann entropy can be expressed in 
terms of the Shannon entropy H as S(pavg) = — Silo 1 ^ 1°S 

If A = {|ai)}^Li is a set of kets (pure states), then using matrix algebra it can 
be shown that the non-zero eigenvalues of the matrix Ga and the operator £\ |a^) (a^| 
are equal. Hence, the upper bound on the accessible information in a set of states can 
be calculated as the Shannon entropy of normalized eigenvalues of the Gram matrix 
of that set of states. The optimization procedure we have presented, which finds the 
optimal success probability p, also finds the corresponding vector App . From this, A n / 
is easily computed, which are the eigenvalues of the Gram matrices of the leak and of 
the redundancy. From these eigenvalues it is then very simple to directly upper bound 

jt Such approximations often appear in many proposals for realizations of quantum cryptographic 
protocols: polarization-encoded photons (which realize a qubit) are often approximated by polarized 
weak coherent pulses. In this case, almost without exception, a new security analysis is required. 
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the accessible information in the leak and the redundancy. 
4. Application: From coherent states to qubit states 

Traditionally, for most applications of quantum information processing, the information 
is encoded in qubit states. However, it is also possible to use continuous-variable states, 
that is, states of the quantum harmonic oscillator (e.g. coherent states). In this section 
the source states will be a set of coherent states 

A={\a k ) = \e^a)} k=0 _ N _ 1 (16) 

where a is a real amplitude and 8k are their phases. The target states are the qubit 
states in the Bloch sphere XY plane, 

a={|&*> = -^(|0) + e"*|l»} • (17) 

I V ^ ) k=0,...,N-l 

By choosing the angles 9 k as 9k = 2kir/N we obtain a very common family of encodings, 
which incidentally renders the sets A and B symmetric. 

The problem we resolve is finding the optimal uniform transform taking the states 
in the set A to those in B. Initially, let us assume N is even. We may immediately note 
that the states in A are linearly independent, so an unambiguous measure- and-prepare 
process will get us the desired transform succeeding with the success probability of an 
UDS procedure applied on the states in A. The optimal success probability of such a 
UDS procedure establishes a lower bound, and an upper bound is found by noting that 
if TV is even, then the desired probabilistic transform maps any two input states with 
relative phases differing by ir into orthogonal states. Hence, in particular this transform 
effectively performs unambiguous discrimination of the states |a) and | — a). By using 
the results of section 12. 1[ the success probability of this UDS procedure (hence of the 
overall probabilistic transform) is upper bounded by Sbound = 1 — exp(— 2a 2 ). This 
bound is always higher than the probability of unambiguous discrimination, except for 
the case of two states, where they coincide. The cases for 4 and 8 states are illustrated 
in Figure [3j 

In the remainder of this section we prove, constructively, that the upper bound can 
always be reached. This is done by first obtaining results for the case a < 1, and then 
using these results, constructing transforms also for the case a > 1. 

To begin, we introduce the notion of a multiprobabilistic transform, defined in 
[T2] . Multiprobablistic transforms are a generalization of probabilistic transforms, where 
there may be many different sets of targets states and with some probabilities an input 
state is transformed to a corresponding state in one of the target sets. For our purposes, 
we shall define the uniform version of such transforms: 

Definition 7 Let S = {|sj}}" =1 be a set of source states and T J = {|^}}j_ for 
j — 0, . . . , k — 1 be a collection of possible target states. A uniform multiprobabilistic 
transform T from the set S to the sets in {T^}j, succeeding with the probability vector 
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Figure 3. (color online) Comparison of the optimal success probability of 
unambiguous discrimination of 4 (red, dashed) and 8 (blue, dotted) states of a 
symmetric set of states, as a function of the real amplitude a. The black curve 
represents the optimal success probability of the coherent to qubit states transform, 
which is independent of the number of states. 

fc-1 

(po, . . . ,Pk-i), where Pi = 1 and for all i Pi > 0, performs 

i=0 

7~(|sj)) = \t{) with probability pj 
for i — 1, . . . , n and j — 0, . . . , k — 1. 

The set T° corresponding to success probability p is reserved for the 'fail outcome' 
states, analogous to the redundancy set of states in probabilistic transforms. 

As a consequence of Theorem 3 in [12], for fixed source set S and target sets 
and a probability vector (p , . . . ,pk-i), such a uniform transform exists if and only if 
there exists a set of Gram matrices of states {n/, II 1 , ... , II fc_1 } such that the following 
equality holds: 

g s = p u f + Pl G T i o n 1 + ■ • • + p fc _iG Tfc -i o n fc -\ (18) 

where Gs is the Gram matrix of the set S and G^i the Gram matrix of the set T J for 
all j . We will call such a transform leakless if the matrices IP = 1 for all j are matrices 
with all entries being the unity, and redundancy-free if the matrix IP = 1 0. 
Let us now define a collection of sets of target states as 

& = {\b i )®i}?S 1 ,j = l,2,...,N-l. (19) 

That is, the set comprises states which are j-fold copies of the elements of the 
(original target) set B = B 1 , which are the XY plane qubit states. Then we have the 
following lemma, which holds specifically for the source and target states of interest: 

Lemma 8 Let the amplitude a of the states in the set A, defined in equation [To]) , 
satisfy < a < 1. Then there exists a uniform multiprobabilistic transform with the 

ff Note that 1 is a Gram matrix of any set of unit vectors which are all equal. 
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success probability vector (p , • • • ,Pn-i)> which takes the states from the set A to the 
collection of target states {B^}^~^ and is redundancy- free and leakless. The failure 
probability po of this transform is equal to exp(— 2a 2 ). 

The proof of this Lemma is somewhat cumbersome and left for the Appendix. The 
requirement that the transform be redundancy-free and leakless uniquely fixes the 
transform, up to the freedom in the choice of the realized fixed failure-outcome states. 

As a corollary of this Lemma we obtain the desired uniform probabilistic transform 
from coherent states in A, for < a < 1, to the qubit states in B, and a characterization 
of the leak and redundancy for this optimal transform, as we now show. 

Corollary 1 Let A and B be symmetric sets of an even number N states, as defined 
at the beginning of this section, and let < a < 1. Then there exists a redundancy-free 
uniform probabilistic transform taking the states from A to corresponding states in B 
succeeding with probability p SUC c = 1 — exp(— 2a 2 ). This transform is also optimal. 

Proof: 

Lemma [8] establishes the existence of a multiprobabilistic uniform transform from the 
set A to the sets {-B- 7 }^ 1 , which is both redundancy- free and leakless, when < a < 1. 
But then, by Theorem 3 in [12] there exists a probability vector (p , . . . ,Pn-i) such that 
the following equality holds: 

G A = p l+piG B i -\ Vp N -iG B N-i. (20) 

Note, the expression above is the necessary and sufficient condition given in expression 
(118j) for the existence of a uniform multiprobabilistic transform, which is now both 
redundancy-free, and leakless. 

Since the Hadamard product is distributive, and by expression (TATTO . this 
expression (120]) can be rewritten as 

G A = Po l + (1 - Po )G B i o ( — G B o + ■■■ + ^^G b n- 2 ) , (21) 

V 1 - Po 1 - Po J 

with G b q = 1. Let us denote expression in the parenthesis in the equation above by II s , 

IT = + — ^— — G B i + ■■■ + ^G BN - 2 . (22) 

1 - Po 1 - Po 1 - Po 

Note that II s is a Gram matrix of states, as it is a convex combination of Gram matrices 

of states. So we have 

G A = p l + (l-po)G B i off. (23) 

This expression is a sufficient criterion for the existence of a uniform probabilistic 
transform taking the defined coherent states to qubit states. Since the fail probability is 
Po = exp(— 2a 2 ), by the upper bound on the success probability derived at the beginning 
of this section, it is the lowest possible, and this transform is optimal. This transform 
is also redundancy- free, as the Gram matrix of the redundancy is 1, that is, a Gram 
matrix of a set comprising identical states. The leak of this transform is symmetric by 
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lemma El as the matrix II s is a weighted sum of circulant matrices (see expression ( 12 2 p ) , 
hence circulant itself. □ 

By investigating the expression ( 1221) . we can construct the leak states of this 
transform explicitly. The leak state corresponding to the input state can, 
up to unitary equivalence, be written as 



where the states of the last register (the indicator register) are orthogonal for differing 
labels, and we define for any state \rj), the zeroth tensoral power \rj)®° = 1 (the unity 
of the field underlying the Hilbert space, i.e. the number one). These 'leaky' states are 
superpositions of varying numbers of copies (from zero to iV — 2) of the target state \bi), 
all living in orthogonal subspaces of a larger Hilbert space (due to the orthogonality of 
the indicator register states). 

We will now prove the existence of an optimal transform for any amplitude, also 
a > 1. To do this we first note that coherent states can be 'split' into multimode states of 
a lower amplitude, i.e. there exists an isometry performing U\e l ^a) = (S)*.^ 1 l^Pk), V 0, 
as long as a 2 = X^lo* @k- We note that in quantum optics, this transform can be 
implemented by using balanced beamsplitters and phase shifters. Assume that we are 
given a set of coherent symmetric states A, as defined in equation (Tl6|) with 9^ = 2irk/N, 
of amplitude a > 1. Each of these states in A can be deterministically taken to the 
state (^fclo 1 \ eldk P) by 'splitting' the coherent state into M modes, where j3 = 
and M = (|_ctj + l) 2 . Now we have that /3 < 1 and a 2 = MP 2 , where M is a non- 
negative integer. By the Corollary [T] we have that each subsystem state \e ldk P) can be 
individually transformed to the corresponding qubit state in the set B with probability 
exp(— 2/3 2 ). Note that, if only one of the individual transforms performed on the states 
\e tdk P) succeeds, then we have succeeded in generating exactly one copy of the target 
state from the source state \e l9k a). The probability of the transform failing on all M 
copies is exp(— 2(3 2 ) M = exp(— 2a 2 ). Hence, we have the following Theorem. 

Theorem 1 Let A and B be symmetric sets of an even number N states, as defined 
in equation IfTty) with 9^ = 27rk/N, and let a > 0. Then there exists a redundancy-free 
uniform probabilistic transform taking the states in A to the corresponding states in B, 
succeeding with probability p succ = 1 — exp(— 2a 2 ). This transform is optimal. 

The leak of this overall transform will in general comprise multimode states, which 
in some modes contain a fixed state (the modes where the probabilistic transform failed), 
and in some modes the target qubit and the individual transform leak of the form given in 
expression (124]) . In contrast to unambiguous discrimination procedures for symmetric 
coherent states, the success probability of these optimal transforms generating qubit 
states does not depend on the number of states. In this analysis, we have assumed that 
the number of possible input states is even. As the success probability does not depend 
on the (even) number of states, the probabilistic transform can be done with the same 




(24) 
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success probability even when the number of states is N for an odd N. To see this, 
simply consider the transform which works for 2N states. The initial odd numbered 
symmetric states will be an interlaced subset of the extended set. However, here we 
do not have the validity of the upper bound any more, and it is not clear this success 
probability is optimal. While we do not offer a proof that the same bound holds for odd 
numbered states, evidence from performed numerical testing confirms this hypothesis. 

An interesting aspect of the presented transform is that the success probability 
does not depend on the number of source and target states. Therefore it is possible that 
the same success probability may be reached when we consider the limit of an infinite 
number of states, N — > oo. However, in the proofs of lemmas in this analysis, the 
finiteness of N is used, so proving this extension to the limit may be non-trivial. In the 
following section, we will however present a proposal for the realization of the presented 
transform, which does not assume a finite number of states, but achieves optimality in 
an asymptotic limit only. 

4-1. Transforming coherent to qubit states using optical state truncation 

After these results on the existence of optimal transforms, we will look at practical 
ways of implementing such transforms. A straightforward way of (sub-optimally) 
generating the desired qubit states from the source coherent states is through optical 
state truncation (OST) [22] or 'quantum scissors', as we will now describe. For a single 
mode state, such as a coherent state, OST is the probabilistic and heralded projection 
of the input state to a finite subspace (as defined by a selection of a number of Fock 
states), followed by renormalization of the state vector. OST has been realized using a 
linear optical network |23j . In this section we will focus on truncation to the subspace 
of the first two Fock states. Given the input state expanded in the number basis, 



where the normalization factor is J\f = ( | Co | 2 + |ci| 2 ) . If we now consider the input 
state to be a state from our source set of N coherent states, 

\a J ):=\e^a} = e-^Y,^T^ ^ 

k=o Vfc 

we see that the output state, after successful OST, which occurs with probability 



00 



where |q| 2 = 1, OST is characterized by the POVM (POM) elements 

U s = |0)(0| + |1)(1|, Uf = I-U a 
and, upon success, produces the state 

\lptrunc) =JV(co|0) + Ci|l)) 



(25) 



P 



P ST = e- a \l + a 2 ), is 




(27) 
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If a = 1, this transform produces exactly the desired target qubit states. 

This realisation does not, however, give the optimal success probability. The success 
probability of this transform for a = 1 is approximately 0.735, which is less than the 
optimal value of approximately 0.864. The success probability of optical truncation 
to the vacuum and single photon subspace approaches unity more than exponentially 
quickly as the amplitude tends to zero. For a^l, the truncation will not produce the 
targeted qubit state, due to an uneven distribution of the weights between the |0) and |1) 
states. Re-weighting of the amplitudes can, however, also be achieved probabilistically, 
so now we consider the performance of the coherent to qubit transform realized by state 
truncation, followed by redistribution of the weights, for amplitudes a < 1. 

The redistribution of weights may optimally be done by applying a POVM defined 
by the positive elements 

P/ = 7|0>(0|, P.=I-P f , (28) 

where 7 = 1 — a 2 . These transforms fall into a class we call umbrella transforms. 
The success rate (the probability of outcome associated with P s ) of this transform is 
Pumb — 2a 2 / (1 + a 2 ), hence the overall success probability of optical truncation followed 
by an umbrella transform for weight redistribution is 



2a 2 
1 + a 2 



Poverall = PumbP° ST = Z ~ ^ * (l + 0?) = 2a 2 e 



This value is always below the success probability of the optimal transform as the 
quotient p op t/ Poverall is equal to 
p opt _ sinh(a 2 ) 



Poverall & 



(29) 



which is always greater than 1 on the interval of interest, approaching unity when a — > 0. 



4-2. Asymptotic optimality through beamsplitting 

While the optimal transform of coherent to qubit states cannot be realized by OST 
followed by an umbrella transform to redistribute relative weights, it is evident that 
this transform performs better and better as the amplitude is reduced. It is natural to 
check whether a beamsplitting pre-procedure, analogous to the one used to prove the 
optimality Theorem [1] in the a > 1, may be used to boost the overall success probability. 

The procedure goes as follows: the input state of real amplitude a is 'beamsplitted' 
into M modes of amplitude a/y/M with the same complex phase as the initial beam (as 
was done in the proof of Theorem [1]). Then OST is applied to each of the beams, and if 
an individual OST succeeds, an umbrella transform is applied to re-weigh the vacuum 
and |1) components. The overall procedure succeeds if, for at least one of the split off 
beams, both the truncation and the umbrella transform are successful. 

As we have shown, for a real amplitude a, a re-weighted OST produces the 
corresponding qubit state succeeds with probability p ove raii = 2a 2 e~" 2 . Then, the success 
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Figure 4. (color online) Comparison of the success probability of the optimal coherent 
to qubit states transform and the transform realized by beamsplitting into M beams 
of equal real amplitudes, followed by quantum scissors, followed by relative weight 
normalization between the vacuum and non- vacuum components on each of the weaker 
beams. The a; axis gives the input amplitude a and y the success probabilities. The 
full (black) curve is the success probability of the optimal transform, and the (red) 
dashed curves the success probabilities of the beamsplitter-assisted quantum scissors 
strategies for M = 1 . . . 10. The longer-dashed curves correspond to larger parameter 



probability of the strategy where the input beam has been split into M beams is given 



In the asymptotic case of infinitele many 'splits', the failure probability becomes 



which is equal to the failure probability of the optimal transform. The graph in Figure 
H] compares the success probabilities of the optimal transform and the beamsplitter- 
assisted strategies for various numbers of splits M. This procedure can then arbitrarily 
well approach the optimal success probability. It is suitable for experimental realizations, 
as both quantum scissoring and the weight redistribution using umbrella transforms may 
be realized experimentally. 

5. Conclusions 

In this work we have addressed probabilistic transforms taking states from a 'source' 
to a 'target' set of quantum states, with emphasis on the case where these sets are 
symmetric. Such transforms can for example serve as interfaces between continuous- 
variable and finite-dimensional quantum systems. State-dependent cloning and quantum 
state discrimination are also special cases of probabilistic transforms. 

We have emphasised that in a probabilistic transform, information may be lost and 
leaked, which may have impact on the protocol efficiency or security. For this purpose 
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we introduced the concepts of the leak and redundancy of a probabilistic transform. 
We have demonstrated how symmetric source and targets sets, which arise naturally in 
many quantum information applications, allows for a much simpler theory. In particular, 
we derived a linear program which finds optimal uniform probabilistic transforms in 
this symmetric setting. This constitutes a significant simplification over optimization 
techniques which must be employed in more general cases, and the dimensionality of 
the search space is reduced quadratically in the number of states considered. The 
presented method also allows for a simple characterization of the aforementioned leak 
and redundancy. 

Following this, we applied the derived theory to the problem of transforming a 
particular set of coherent states to a particular set of qubit states. Both sets appear 
in many quantum information protocols. The considered set of coherent states are so- 
called 'phase-locked' quantum states (e.g. used for quantum key distribution) suitable 
for long-range communication, and the set of qubit states is ubiquitous in quantum 
computation. For this setting, we derived the optimal transform and characterized 
the leak and the redundancy. By using beamsplitting, followed by the well-studied 
process of optical state truncation or 'quantum scissors', and an experimentally feasible 
amplitude re-weighing procedure, a probabilistic transform between these sets of states 
can be realized, albeit with sub-optimal success probability. The success probability of 
this procedure can however be made to asymptotically approach the optimal success 
probability. 

An immediate application of such a transform may be in the realization of Universal 
Blind Quantum Computation (UBQC) [19], in a case where the client is restricted to 
producing coherent states, in contrast to the single-qubit states required by the original 
protocol. A related procedure for this scenario was recently suggested in [21], where 
phase-randomized weak coherent states were used, and the information was encoded in 
the polarization. This encoding the information remained essentially unitarily equivalent 
to the original single-qubit encoding. The question whether UBQC is possible when the 
client uses phase-encoded coherent states (where the unitary equivalence no longer holds) 
remains open. Finally, the approaches developed in this paper may be applied to the 
task of amplifying coherent states truly perfectly, which can be achieved probabilistically 
when the number of possible phases is finite. This will be the subject of further work. 
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Appendix A. Proofs of Lemmas 

Here we give the proofs of the Lemmas which were stated in the main body of the 
paper. For the reasons of brevity, occasionally we will skip through technical details, 
and rather present the main ideas. We begin by proving the uniformization (Lemma [2]) 
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Figure Al. The quantum circuit by which a probabilistic transform, realized by 
the action of a unitary W acting on an augmented Hilbcrt space followed by the 
measurement of an indicator register, can be 'uniformized'. The same circuit also 
serves to symmetrize the leak and the redundancy of a uniform probabilistic transform. 
In the proofs of lemmas we will address the states of the system above at cuts A and 
B denoted in this figure. 



and symmetrization (Lemma Hj) lemmas. 
Proof of Lemmas [H and [7] 

Lemma [5] (Uniformization) If there exists a probabilistic transformation T taking the 
states in A to states in B which succeeds with the probabilities {pi]f =l , where A and 
B are symmetric sets of states, then there exists a uniform probabilistic transform T' 
taking the states in A to states in B which succeeds with probability 




Proof: 

As noted, each probabilistic transform may be realized as a unitary transform acting 
on an augmented Hilbert space, followed by a measurement of an indicator register. In 
the circuit of Figure IA11 the transform T is represented by this extended unitary W . 
As both the input and output sets of states are symmetric, there exist unitaries which 
sequentially shift though the states of the set, obeying the intrinsic order. We denote 
these unitaries by U and V, corresponding to the sets A and B respectively, and the 
controlled powers of these unitaries appear in the circuit. The state \Aux) is pre-set to 
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be the uniform superposition 

N-l 

\Aux) = (A.l) 

k=0 

where \k) is the I qubit state of the computational basis <S> ■ ■ ■ <8> \bo), bj G {0, 1} 

for all j such that . . . 60)2 = (^)io, where the subscripts designate the base of the 
number representations. 

First let us show that the circuit shown performs the desired transform. The state 
of the system at cut A in the circuit is 

JV-l 

1/VNJ2 \k)\a i+k m od N )\Aux 2 )\0), (A.2) 

fe=0 

where \Aux2) is some fixed auxiliary state in a sufficiently dimensional state space. The 
notation we shall use corresponds to the notation used in formula [3j Following this, the 
transform T is applied to the register which contained the input state. The transform 
is explicitly realized as a unitary W acting on a bigger space. The state at cut B in the 
circuit is 

i+k mod N \ k )\ b i+k mod N^i+k mod n) 1°) 

\fc=0 / 
r N—l 



+1/VN V 1 -Pi+k mod N \k)\Fail)\(f>^ k mo d n) |1). (A.3) 

\k=0 / 

If the measurement outcome of the indicator (the last) register corresponds to the state 
|0), then the transform has succeeded (c.f. expression [3]) . From the expression above, it 
can be seen that this happens with probability p = ■h Yli=i Pi- Assume that the indicator 
measurement yielded the desired output. The section of the circuit after cut B undoes 
the controlled rotations, and the state at the end of the entire circuit is 

N-l 

^J2V p i+k mod j#>IW<+fc mod iv>- ( A - 4 ) 

k=0 

The middle register contains the desired output state, and the rest of the system contains 
a new leak. This overall procedure constitutes the new, uniformized probabilistic 
transform T' from the statement of the Lemma, which succeeds with the averaged 
probability p. This proves Lemma [2 □ 

One can verify that the new leak, generated by the 'uniformized' transform de- 
scribed above, comprises a symmetric set of states. Using an analogous analysis, one 
can show that the redundancy (state generated in case of the measurement outcome 
corresponding to the |1) state in the indicator register) is a symmetric set as well. Now, 
if the extended unitary W corresponds to a uniform probabilistic transform, with leak 
and redundancy which are not symmetric, then the extended transform of Figure IA1 
will have the same success probability as W itself, and the leak and redundancy will be 
symmetrized. Thus, the analysis above proves Lemma H] as well. □ 
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Lemma [3] A Gram matrix of kets is a circulant matrix if and only if the corresponding 

set of kets is symmetric. 

Proof: 

Let A = {\ak)}k=o be a set of kets. We first show the necessity. If the set of kets is 
symmetric, then its Gram matrix is circulant. Let U be the unitary which sequentially 
shifts through the set of kets, obeying the intrinsic order. Then the Gram matrix may 
be written as 



G A = [(^M^Io 1 = [(aolt/^K)]^!/ = 

[Kl^lao)]^- 1 = \(a \U™ mod "lao)!*" 1 '"" 1 . (A.5) 

It is easy to verify that the last matrix in the sequence of equalities above is circulant. 

Next we show the sufficiency If A is a set of states such that its Gram matrix 
Ga is circulant, then it is symmetric. Since Ga is a matrix of states, we have that Ga 
allows the Cholesky decomposition, that its spectrum {Xk}k=o * s reai > non-negative and 
sums up to iV (as the trace is preserved under basis change), and as it is circulant, we 
have that it diagonalizes in the uDFT basis. Using these properties and a bit of matrix 
algebra, one can show that if a set of kets {\ipk)}k=o bas Ga as a Gram matrix, then 
its elements can be written as 

AT-l 

l^> = -7^£-7r eT l 6 i>' (A ' 6) 

V A j=Q y/Xj 

where the kets {\bk)}k=o comprise an orthonormal basis, and we define the coefficient 
to be zero if Xj = 0. Consider the unitary U, acting on the {\bj)}j basis as follows: 

U\b j )=e^\b j ). (A.7) 
By applying U on the ket \ipk) we have: 



N-x 

ViV j=Q y/Xj 



1 \ ^ 1 2(fc + l)j7Ti 



-J^z N \bj) = H k+1 m od at)- ( A - 8 ) 



j=0 V A J 

Hence, the set of kets A which they represent is symmetric and this proves the lemma. 
□ 

The following lemmas were given in section HI In their proofs we shall adhere to 
the notation of the main body of the paper. 

Lemma [8] Let the amplitude a of the states in the set A, defined in equation [To]) , satisfy 
< a < 1. Then there exists a uniform multiprobabilistic transform with the success 
probability vector (p , . . . ,Pn-i), which takes the states from the set A to the collection 
of target states {Bi}^~^ and is redundancy-free and leakless. The failure probability p$ 
of this transform is equal to exp(— 2a 2 ). 
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Proof: 

As noted in the main body of the paper, the desired transform exists if and only if 

G A = Po Tl f + Pl G B i o n 1 + ■ • • + p^Gbm-! o n^ 1 (A.9) 

holds for a vector of probabilities (po, ■ ■ ■ ,Pn-i) an d for a a set of Gram matrices of states 
{n^, II 1 , . . . , II^" 1 }. Acknowledging the requirement that this transform is leakless and 
redundancy-free the criterion becomes 

Ga = Pol + PiGb 1 H Vp N -iG B N-i, (A. 10) 

where 1 is a matrix with all entries being the unity. 
The matrix G B j can be written as 

G B3 =G B o...oG B :=G°J, (A.ll) 

j times 

and since Ga, G b are circulant, and the Hadamard product of circulant matrices 
is circulant, G B j is circulant for all j. Hence all the matrices in expression flA.lOj) 
simultaneously diagonalize in the unitary discrete Fourier transform basis so we can 
write this criterion in terms of vectors of eigenvalues of the corresponding matrices: 

Ag a = PoAi + Pi\g b1 H h Pn-i^g b n-i ■ (A.12) 

The vector Ai is the first vector of the canonical basis, that is vector with one as the 
first entry and zeroes elsewhere, multiplied by N. 

It can be shown that, for any N, the vector of eigenvalues of G B has only the first 
two eigenvalues non-zero, and their value is N/2. From this, using the properties given 
in expressions (jHJ) and (j9]), we can see that, for k < N — 1, the vector of eigenvalues of 
G° B is given by 

T 



A - N 

Ank — — r 

" 2 k 



o,---,o 



(A.13) 



Let M be the column matrix defined by 

M=[JVe 1 |A B |Afl2|---|A s w-i]. (A.14) 

Then we can rewrite the condition (1A12I) as a system of equations, 

X Ga = Mf (A.15) 

where p = [po, . . . ,Pn-i] ■ Since M is upper-triangular, with non-zero element across 
the diagonal, it is invertible. Hence, there exists a unique vector "p 4 satisfying the 
system above. The sum of the elements of a column of the matrix M is N, so we can see 
(by multiplying the system ( 1A15I) with the row vector [1, . . . , 1] from the left) that 
Yld=Q l Pi = 1) as ^e sum of the eigenvalues of Ga is N. 

To prove the stated Lemma, we need to show that all the values are non-negative 
(for < a < 1), and that we need to show that po = exp(— 2a 2 ) . We begin by 
showing the positivity of values p,j, as stated, and we finish of the proof by showing that 
Po = exp(-2a 2 ) . 
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As noted above, the system (1A. 15[) has a unique solution (and ^ exists), and 
we need to show that the solution vector comprises positive elements, i.e. 

M^X Ga (A.16) 

is a vector of non-negative real numbers. Note that the matrix M can be written as 
M = M'.D, where M' collects all the binomial coefficients and D is a diagonal matrix 
which appropriately assigns the weights to the columns of M. The k th column of matrix 
M' is then given by 

.5)"G)"-'(S'°"-"° T 

The inverse of M is then 

M (-i) = £)-i.Af' (-1) . (A.17) 

As the matrix D~ x comprises only positive elements (moreover it is also diagonal), in 
order to show that the expression ( 1A.16I) is a non-negative vector, it will suffice to show 
that 

M /( - 1} A Ga (A.18) 

is a non-negative vector. Let S be a diagonal matrix of size N of alternating signs, the 
first sign being positive. Using known properties of sums of binomial coefficients, one 
can show that S.M'.S is the inverse of the matrix M' . We omit the proof of this claim 
as the proof is technical, and the details are of no further consequence. 
Now we proceed to show that each entry of the vector 

M' {_1) A Ga = S.M'.SX Ga (A.19) 

is non-negative, if the amplitude a is a positive and less or equal to unity. Let Aj be 
the i th eigenvalue of the matrix Ga, i-e. the i th component of Xg a - Note that the 
enumeration starts at zero. Then the k th entry of the vector S.M' .SXg a is given by 

N-l , .x 

(e k ) T S.M>.S\ GA = 52(-l)* +k r k )\ j (A.20) 
j=k ^ ' 

The last entry of the vector S.M' .S\q a is the last eigenvalue of G a, hence positive, so 
for the expression (1A.20j) to be positive, it suffices to show that 

Vh>0 (A.21) 



kj V k 

for all > k < N — 1 and k < j < N — 1. This expression simplifies to 

i)^-ctv-(0(^-j^«)- < A22) 

Since k) is positive, we only need to show that the following holds: 

A ^ " j-~k\l Xl+l ~ °- (A ' 23) 



Transformations between symmetric sets of quantum states 



28 



In order to show this, we need to analyse the structure of the eigenvalues appearing 
as components of Xg a - Recall, \q a was defined as the discrete Fourier transform of 
the first row of Ga- Using the expansion of coherent states in the Fock basis the j th 
eigenvalue can be given as 



AT — 1 OO n 

.2 a 2r 



\j = exp (-2jlm/N) ^ — ex V (2lrni/n). (A.24) 

1=0 r=0 r ' 

This can further be rearranged as follows: 

N-l oo 2r 

Xj = e~ a2 E E exp (-2jlni/N) — exp(2lmi/n) (A.25) 



1=0 r=0 

oo o„ N-l 
2 \ - Of* 



E — E ex P( 2 ^ - jV/"), (A-26) 



r. 

r=0 1=0 



where in order to get to expression flA.26j) . we used the fact that the infinite sum above 
is absolutely convergent, hence allows the commuting of sums. 

By the properties of sums of roots of unity, the expression J2b=^ 1 exp(2/(r — j)m/n) 
is equal to n if r — j is divisible by A" and zero otherwise. Hence we get 

Xj = e~ a N y i=- -. (A.27) 

The elements in the sum above appear as the summands in the Taylor expansion of 
e 2a ; for j = 0, this sum collects every N summand from the Taylor series expansion, 
starting from the zeroth summand. For any other j it collects every N th summand 
from the Taylor series expansion, starting from the j-th summand. We note that the 
eigenvalues above, for a fixed A" can be expressed in a closed form in terms of Generalized 
hypergeometric functions. 

We set out to show that inequality f)A.23j) holds. By inserting the explicit 
expressions for the eigenvalues we have derived, we obtain the expression 



A 3+1 X - 
Aj " j-k + l Xi+1 ~ 

6 N [ho ( Nr + T) 1 ~ 3 - k + 1 ^ (Nr + j + 1) ! J ' (A ' 28) 
and again by absolute convergence of the sums above we may reshuffle them and obtain 



oo 

v2 



^ a 2(Nr+j) / J + l 1 2 \ 

° N ^ (Nr + j)\ V " (j-k + 1) (Nr+j + lf) ' (A ' 29) 

The expression above is positive if the expression in the last parenthesis is positive. Now 
we inspect the coefficient with the term a 2 in the parenthesis, 

J + 1 1 
(J-k + 1) {Nr+j + 1)' 
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This expression is always positive, and note that the denominator (J — k + 1) is greater 
or equal to unity, and the denominator (Nr + j + 1) is larger or equal to j + 1, so the 
entire expression is less or equal to unity. But then for a < 1 the expression ( 1A.29j) is 
non-negative. 

To finish the proof we need to show that po = exp(— 2a 2 ) . Note that po = 
e$M(-V\ GA . Recall, \ Ga = DFT.(e%.G A ) T (i.e. the DFT of the first row of the Gram 
matrix of the set A is the vector of eigenvalues of G A )- The exact form of M~ l was 
given in expression ( 1A.17I) . and we can see that 



e^M(" 1 ) = l [1,-1,1,..., 1,-1]. 
Thus, it holds that 

p = e T M^DFT.(e T .G A ) T = 1 [1, -1,1,..., 1, -1] .DFT.{e T Q .G A ). 
We can see that that 

[1,-1,1,..., 1,-1] .DFT = Ne N/2 , 

as this is equivalent to adding a ir phase to each of the rows of the DFT matrix and 
then summing up the rows. Without the phase shift, the sum of the rows is a vector 
with a non-zero entry only at the first position. The phase shift corresponds to a cyclic 
permutation of columns by N/2 — 1 positions, so the sum of the rows of the permuted 
DFT matrix has the only non-zero entry at the {N/2 + l) st , and this entry is N. Hence 
we have 



Po = e N/2 .{el.G A ) T = exp(-2ct 
and we have proven our Lemma. □ 
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